@oxy.so/services 12.12.0 → 12.14.0

package/lib/typescript/module/ui/boot/runProviderColdBoot.d.ts

@@ -45,10 +45,34 @@ export interface RunProviderColdBootOptions {
     }) => Promise<void>;
     markAuthResolved: () => void;
     setTokenReady: (ready: boolean) => void;
+    /**
+     * Show the session saved on this device before any network: the account from
+     * its cached profile, auth resolved. Resolves `true` when it did, `false` when
+     * the device holds nothing a first paint can use (then the boot runs as a
+     * first boot). Never consulted in `sessionMode: 'identity'` or with an OAuth
+     * return on the URL.
+     */
+    paintCachedSession?: () => Promise<boolean>;
+    /**
+     * The server ended the painted session: the registry now classifies the app
+     * as OAuth-only, or the mint answered this holder `invalid_device_secret` /
+     * `no_active_session` and no recovery lane restored one. Sign out now.
+     */
+    onCachedSessionRejected?: () => Promise<void>;
+    /**
+     * The painted session could not be checked yet (offline, the registry or the
+     * mint unreachable). It stays on screen; call `retry` later to ask again.
+     */
+    onCachedSessionUnconfirmed?: (retry: () => Promise<void>) => void;
 }
 /**
  * Device-first cold boot for `@oxy.so/services` providers.
  *
+ * A returning session saved on this device (account mode, the app last
+ * classified `device`, its profile cached) paints first, with no network, and
+ * is then checked in the background — see `paintCachedSession`. Otherwise, a
+ * first boot:
+ *
  * Ordered pipeline:
  * 1. Complete an OAuth authorization-code return already on the URL (web)
  * 2. `runSessionColdBoot` — device-secret mint (+ the native Commons-proof lane,

package/lib/typescript/module/ui/boot/runProviderColdBoot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runProviderColdBoot.d.ts","sourceRoot":"","sources":["../../../../../src/ui/boot/runProviderColdBoot.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAM1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA4B,CAAC;AAwB9D,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAC;AA0CpD,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,cAAc,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC;IACvD,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,aAAa,EAAE,CACb,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAC5C,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACzC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAwKzF"}
+{"version":3,"file":"runProviderColdBoot.d.ts","sourceRoot":"","sources":["../../../../../src/ui/boot/runProviderColdBoot.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAM1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA4B,CAAC;AAwB9D,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAC;AA0CpD,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,cAAc,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC;IACvD,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,aAAa,EAAE,CACb,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAC5C,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;;;OAGG;IACH,0BAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;CACnE;AA8LD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CA0FzF"}

package/lib/typescript/module/ui/components/OxyProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OxyProvider.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/OxyProvider.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAwC,KAAK,EAAE,EAAE,MAAM,OAAO,CAAC;AAGtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAqB,CAAC;AAsC5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAyNrC,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"OxyProvider.d.ts","sourceRoot":"","sources":["../../../../../src/ui/components/OxyProvider.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAwC,KAAK,EAAE,EAAE,MAAM,OAAO,CAAC;AAGtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAqB,CAAC;AAuC5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CA0NrC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/lib/typescript/module/ui/context/OxyContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OxyContext.d.ts","sourceRoot":"","sources":["../../../../../src/ui/context/OxyContext.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAmG/B,OAAO,KAAK,EAAmB,uBAAuB,EAAe,MAAM,sBAAmB,CAAC;AAQ/F,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,sBAAmB,CAAC;AAOhG,OAAO,EACL,iBAAiB,EACjB,MAAM,EACN,cAAc,EACd,uBAAuB,GACxB,MAAM,wBAAqB,CAAC;AAI7B;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAykDhE,CAAC"}
+{"version":3,"file":"OxyContext.d.ts","sourceRoot":"","sources":["../../../../../src/ui/context/OxyContext.tsx"],"names":[],"mappings":"AAUA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAoG/B,OAAO,KAAK,EAAmB,uBAAuB,EAAe,MAAM,sBAAmB,CAAC;AAQ/F,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,sBAAmB,CAAC;AAOhG,OAAO,EACL,iBAAiB,EACjB,MAAM,EACN,cAAc,EACd,uBAAuB,GACxB,MAAM,wBAAqB,CAAC;AAI7B;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAutDhE,CAAC"}

package/lib/typescript/module/ui/hooks/queries/useSupervision.d.ts

@@ -2,7 +2,21 @@ export declare const supervisionQueryKeys: {
     all: readonly ["oxy", "safety", "supervision"];
     account: (id: string, sessionId: string) => readonly ["oxy", "safety", "supervision", string, string];
 };
-/** Advisory UI state only. Every read/write still requires the live server policy. */
+/**
+ * The signed-in personal account's supervision (parental-control) state.
+ *
+ * Policy: the SDK keeps the session's supervision state always current — it is
+ * fetched when the session is established, refetched when the app returns to
+ * the foreground, and refetched when the session socket signals
+ * `supervision_changed` (`SupervisionStateObserver`, mounted by `OxyProvider`).
+ * Screens read it from the cache without waiting for the network: no observer
+ * forces its own refetch on mount. `data` is undefined only while the session's
+ * first fetch is pending, when the query is disabled (signed out, or not a
+ * personal account) and after a failed fetch.
+ *
+ * Advisory UI state only. The server keeps enforcing supervision on every
+ * content request; never treat this value as authorization.
+ */
 export declare function useSupervision(): {
     data: {
         self: {
@@ -472,4 +486,11 @@ export declare function useSupervision(): {
     }, Error>>;
     fetchStatus: import("@tanstack/react-query").FetchStatus;
 };
+/**
+ * Keeps the session's supervision state current for every `useSupervision()`
+ * reader: its observer fetches once the session is established and on each
+ * return to the foreground, and the `supervision_changed` socket signal
+ * refetches it. Rendered once by `OxyProvider`.
+ */
+export declare function SupervisionStateObserver(): null;
 //# sourceMappingURL=useSupervision.d.ts.map

package/lib/typescript/module/ui/hooks/queries/useSupervision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useSupervision.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/hooks/queries/useSupervision.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,oBAAoB;;kBAEjB,MAAM,aAAa,MAAM;CAExC,CAAC;AACF,sFAAsF;AACtF,wBAAgB,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB7B"}
+{"version":3,"file":"useSupervision.d.ts","sourceRoot":"","sources":["../../../../../../src/ui/hooks/queries/useSupervision.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oBAAoB;;kBAEjB,MAAM,aAAa,MAAM;CAExC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB7B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,SAOvC"}

package/lib/typescript/module/ui/session/cachedBoot.d.ts

@@ -0,0 +1,48 @@
+/**
+ * What a returning session needs for its first paint, kept on this device.
+ *
+ * A cold boot used to wait on two round trips before it showed anything: the
+ * registry's classification of this app and the profile of the signed-in
+ * account. With a session saved on the device, the app now paints at once from
+ * what the last run left here, and the boot verifies both in the background
+ * (`runProviderColdBoot`). This module is that cache:
+ *
+ * - the registry's last verdict on this app (`device` or `oauth`), tied to the
+ *   `clientId` it was given for;
+ * - the last account profile the runtime held, tied to that account's id.
+ *
+ * Both live in the provider's ordinary storage (AsyncStorage on native,
+ * `localStorage` on web), next to the per-account query cache, which already
+ * holds the same profile under the SDK's `users` queries. Neither is a
+ * credential: the device secret and the access token stay in the auth store.
+ *
+ * A cached session is offered only when it matches the auth store: the profile
+ * must belong to the account the persisted session is for, so a switch or a
+ * sign-out on a previous run can never paint somebody else.
+ */
+import type { User } from '@oxy.so/core';
+import { type AuthStateStore } from '@oxy.so/core/session';
+import type { StorageInterface } from '../utils/storageHelpers.js';
+export type SessionLane = 'device' | 'oauth';
+/** A persisted session the app can show before the network answers. */
+export interface CachedSession {
+    sessionId: string;
+    userId: string;
+    deviceId: string;
+    /** The account profile the last run held for {@link userId}. */
+    user: User;
+    /** The persisted access token, when it is still valid past the refresh lead. */
+    warmToken: string | null;
+}
+export interface CachedBootStore {
+    saveLane(clientId: string, lane: SessionLane): Promise<void>;
+    saveAccount(user: User): Promise<void>;
+    clearAccount(): Promise<void>;
+    /**
+     * The cached session for this `clientId`, or `null` when anything a first
+     * paint needs is missing or does not match the auth store.
+     */
+    readSession(clientId: string, authStore: AuthStateStore): Promise<CachedSession | null>;
+}
+export declare function createCachedBootStore(storage: StorageInterface, prefix: string, now?: () => number): CachedBootStore;
+//# sourceMappingURL=cachedBoot.d.ts.map

package/lib/typescript/module/ui/session/cachedBoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cachedBoot.d.ts","sourceRoot":"","sources":["../../../../../src/ui/session/cachedBoot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAAyB,CAAC;AAEhE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,IAAI,EAAE,IAAI,CAAC;IACX,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CACzF;AAuBD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,MAAM,EACd,GAAG,GAAE,MAAM,MAAiB,GAC3B,eAAe,CA+DjB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/services",
-  "version": "12.12.0",
+  "version": "12.14.0",
   "description": "OxyHQ Expo/React Native SDK — UI components, screens, and native features",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -147,11 +147,10 @@
     "copy-assets": "copyfiles -u 1 \"src/assets/**/*\" lib/commonjs/assets && copyfiles -u 1 \"src/assets/**/*\" lib/module/assets",
     "copy-dts": "copyfiles -u 1 \"src/**/*.d.ts\" lib/typescript",
     "delete-debug-view": "rm -rf ./lib/commonjs/components/bottomSheetDebugView ./lib/module/components/bottomSheetDebugView ./lib/typescript/components/bottomSheetDebugView || true",
-    "delete-dts.js": "find ./lib/commonjs -name '*.d.js*' -delete && find ./lib/module -name '*.d.js*' -delete",
-    "prepublishOnly": "node ../../scripts/assert-bun-publish.mjs && bun run typescript && bun run test && bun run build"
+    "delete-dts.js": "find ./lib/commonjs -name '*.d.js*' -delete && find ./lib/module -name '*.d.js*' -delete"
   },
   "dependencies": {
-    "@oxy.so/contracts": "^5.7.0",
+    "@oxy.so/contracts": "^5.8.0",
     "color": "^5.0.3",
     "@peable.to/sdk": "0.4.1"
   },
@@ -160,7 +159,7 @@
     "@commitlint/config-conventional": "^21.2.0",
     "@expo/app-integrity": "~58.0.2",
     "@expo/vector-icons": "^15.0.3",
-    "@oxy.so/core": "6.15.0",
+    "@oxy.so/core": "6.17.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": "^12.0.1",
     "@react-native/babel-preset": "^0.88.0",
@@ -175,7 +174,7 @@
     "@types/jest": "^30.0.0",
     "@types/node": "^20.19.43",
     "@types/react": "*",
-    "@oxy.so/bloom": "12.0.0",
+    "@oxy.so/bloom": "15.18.0",
     "copyfiles": "^2.4.1",
     "expo-clipboard": "~58.0.3",
     "expo-constants": "~58.0.12",
@@ -210,12 +209,12 @@
     "expo-video": "~58.0.11"
   },
   "//@oxy.so/bloom": "Bloom 11.1.0 adds the shared grouped sections, usage card, subscription plans, frame appearance and overlay navigation APIs used by this SDK. First-party Bloom peers remain open above this tested minimum.",
-  "//@oxy.so/core": "Core 6.13.0 supplies the `accounts.settings.*` strings (picture, categories) the account settings speak in every language; 6.12.0 supplies `fileManagement.contentLost` and the `lost` file status a lost file is listed with; 6.11.0 supplies the `follow.errors.*` strings the follow error codes are worded with; 6.4.0 the `follow.*` strings the follow buttons read for every verb and language; 6.1.0 the `oxy.auth.email.{startChange,change,remove}` and `oxy.auth.password.remove` the sign-in & security panels call. Keep one Core instance per app; raise this floor with the root catalogue when new runtime APIs are required.",
+  "//@oxy.so/core": "Core 6.16.0 supplies `requireServerVerdict` and `onHolderRejected`, with which the cold boot checks a session it painted from the cache; 6.13.0 supplies the `accounts.settings.*` strings (picture, categories) the account settings speak in every language; 6.12.0 supplies `fileManagement.contentLost` and the `lost` file status a lost file is listed with; 6.11.0 supplies the `follow.errors.*` strings the follow error codes are worded with; 6.4.0 the `follow.*` strings the follow buttons read for every verb and language; 6.1.0 the `oxy.auth.email.{startChange,change,remove}` and `oxy.auth.password.remove` the sign-in & security panels call. Keep one Core instance per app; raise this floor with the root catalogue when new runtime APIs are required.",
   "peerDependencies": {
     "@expo/app-integrity": ">=56.0.0 <59.0.0",
     "@expo/vector-icons": "^15.0.3",
     "@oxy.so/bloom": ">=11.1.0",
-    "@oxy.so/core": "^6.14.0",
+    "@oxy.so/core": "^6.16.0",
     "@react-native-async-storage/async-storage": "^2.0.0",
     "@react-native-community/netinfo": ">=11.4.1 <13.0.0",
     "@tanstack/query-async-storage-persister": "^5.101",

package/src/ui/boot/__tests__/cachedColdBoot.test.ts

@@ -0,0 +1,187 @@
+/**
+ * `runProviderColdBoot` with a session saved on the device: it paints from the
+ * cache before any network answers, then checks the classification and the
+ * session in the background. A first boot (nothing cached) is unchanged.
+ */
+import type { AuthStateStore, PersistedAuthState, SessionClient } from '@oxy.so/core/session';
+
+jest.mock('@oxy.so/core/session', () => {
+  const actual = jest.requireActual('@oxy.so/core/session');
+  return { __esModule: true, ...actual, runSessionColdBoot: jest.fn() };
+});
+
+import { runSessionColdBoot } from '@oxy.so/core/session';
+import { runProviderColdBoot, type RunProviderColdBootOptions } from '../runProviderColdBoot';
+
+const mockRunSessionColdBoot = runSessionColdBoot as jest.Mock;
+type BootOptions = Parameters<typeof runSessionColdBoot>[0];
+
+const OFFICIAL = {
+  id: 'app',
+  name: 'App',
+  type: 'first_party',
+  isOfficial: true,
+  isInternal: false,
+  scopes: [],
+};
+
+function credentialStore(): AuthStateStore {
+  const state: PersistedAuthState = {
+    sessionId: 's1',
+    userId: 'u1',
+    deviceId: 'd1',
+    deviceSecret: 'secret',
+  };
+  return {
+    load: jest.fn(async () => state),
+    save: jest.fn(async () => true),
+    clear: jest.fn(async () => undefined),
+  } as unknown as AuthStateStore;
+}
+
+function makeOptions(paints: boolean): RunProviderColdBootOptions & {
+  getPublic: jest.Mock;
+  release: (app: unknown) => void;
+  fail: (error: Error) => void;
+} {
+  let release: (app: unknown) => void = () => undefined;
+  let fail: (error: Error) => void = () => undefined;
+  const getPublic = jest.fn(
+    () =>
+      new Promise((resolve, reject) => {
+        release = resolve;
+        fail = reject;
+      }),
+  );
+  const markAuthResolved = jest.fn();
+  return {
+    oxyServices: { apps: { getPublic } } as unknown as RunProviderColdBootOptions['oxyServices'],
+    authStore: credentialStore(),
+    clientId: 'oxy_dk_test',
+    sessionClient: { start: jest.fn(async () => undefined) } as unknown as SessionClient,
+    syncDeviceCredentialToHost: jest.fn(async () => undefined),
+    commitSession: jest.fn(async () => undefined),
+    markAuthResolved,
+    setTokenReady: jest.fn(),
+    paintCachedSession: jest.fn(async () => {
+      if (paints) markAuthResolved();
+      return paints;
+    }),
+    onCachedSessionRejected: jest.fn(async () => undefined),
+    onCachedSessionUnconfirmed: jest.fn(),
+    getPublic,
+    release: (app) => release(app),
+    fail: (error) => fail(error),
+  };
+}
+
+const tick = () => new Promise((resolve) => setTimeout(resolve, 0));
+
+beforeEach(() => {
+  mockRunSessionColdBoot.mockReset();
+  window.history.replaceState(null, '', '/');
+});
+
+it('paints a saved session before the registry or the mint answers, then mints for a verdict', async () => {
+  mockRunSessionColdBoot.mockImplementation(async (opts: BootOptions) => {
+    const session = { sessionId: 's1', userId: 'u1', accessToken: 'minted', via: 'mint' };
+    await opts.onSession?.(session);
+    return { kind: 'session', via: session.via, session };
+  });
+  const options = makeOptions(true);
+
+  const boot = runProviderColdBoot(options);
+  await tick();
+
+  expect(options.markAuthResolved).toHaveBeenCalled();
+  expect(mockRunSessionColdBoot).not.toHaveBeenCalled();
+
+  options.release(OFFICIAL);
+  await boot;
+
+  expect(mockRunSessionColdBoot).toHaveBeenCalledWith(
+    expect.objectContaining({ requireServerVerdict: true }),
+  );
+  expect(options.commitSession).toHaveBeenCalledWith(
+    { sessionId: 's1', userId: 'u1', accessToken: 'minted', deviceState: undefined },
+    { activate: false },
+  );
+  expect(options.onCachedSessionRejected).not.toHaveBeenCalled();
+  expect(options.onCachedSessionUnconfirmed).not.toHaveBeenCalled();
+});
+
+it.each([
+  ['the server ends the holder', OFFICIAL, true],
+  [
+    'the registry now classifies the app OAuth-only',
+    { ...OFFICIAL, type: 'third_party', isOfficial: false },
+    false,
+  ],
+])('signs a painted session out when %s', async (_case, app, mints) => {
+  mockRunSessionColdBoot.mockImplementation(async (opts: BootOptions) => {
+    opts.onHolderRejected?.();
+    await opts.onSignedOut?.('no_session');
+    return { kind: 'unauthenticated' };
+  });
+  const options = makeOptions(true);
+
+  const boot = runProviderColdBoot(options);
+  await tick();
+  options.release(app);
+  await boot;
+
+  expect(mockRunSessionColdBoot).toHaveBeenCalledTimes(mints ? 1 : 0);
+  expect(options.onCachedSessionRejected).toHaveBeenCalledTimes(1);
+  expect(options.onCachedSessionUnconfirmed).not.toHaveBeenCalled();
+});
+
+it('keeps a painted session the server could not be asked about, and asks again', async () => {
+  mockRunSessionColdBoot.mockImplementationOnce(async (opts: BootOptions) => {
+    await opts.onSignedOut?.('no_session');
+    return { kind: 'unauthenticated' };
+  });
+  const options = makeOptions(true);
+
+  const boot = runProviderColdBoot(options);
+  await tick();
+  options.fail(new Error('offline'));
+  await boot;
+
+  expect(options.onCachedSessionRejected).not.toHaveBeenCalled();
+  const retry = (options.onCachedSessionUnconfirmed as jest.Mock).mock.calls[0][0];
+  mockRunSessionColdBoot.mockImplementationOnce(async (opts: BootOptions) => {
+    const session = { sessionId: 's1', userId: 'u1', accessToken: 'minted', via: 'mint' };
+    await opts.onSession?.(session);
+    return { kind: 'session', via: session.via, session };
+  });
+  const retried = retry();
+  await tick();
+  options.release(OFFICIAL);
+  await retried;
+
+  expect(options.commitSession).toHaveBeenCalledTimes(1);
+  expect(options.onCachedSessionUnconfirmed).toHaveBeenCalledTimes(1);
+});
+
+it('a first boot with nothing cached still waits for the verdict and the handoff', async () => {
+  mockRunSessionColdBoot.mockImplementation(async (opts: BootOptions) => {
+    await opts.onSignedOut?.('no_session');
+    return { kind: 'unauthenticated' };
+  });
+  const options = makeOptions(false);
+
+  const boot = runProviderColdBoot(options);
+  await tick();
+
+  expect(options.markAuthResolved).not.toHaveBeenCalled();
+  expect(mockRunSessionColdBoot).not.toHaveBeenCalled();
+
+  options.release(OFFICIAL);
+  await boot;
+
+  expect(mockRunSessionColdBoot).toHaveBeenCalledWith(
+    expect.objectContaining({ requireServerVerdict: false }),
+  );
+  expect(options.markAuthResolved).toHaveBeenCalled();
+  expect(options.onCachedSessionRejected).not.toHaveBeenCalled();
+});